TITLE OF THE INVENTION 
METHOD AND APPARATUS FOR CONTENTS INFORMATION 
BACKGROUND OF THE INVENTION 
Field of the Invention 
5 This invention relates to a method of transmitting contents 

information. Also, this invention relates to a method of recording 
contents information. In addition, this invention relates to an 
apparatus for transmitting contents information. Furthermore, this 
invention relates to an apparatus for recording contents information. 
1 0 Also, this invention relates to a transmission medium. In addition, 
this invention relates to a recording medium. Furthermore, this 
invention relates to a method of decrypting contents information. 
Also, this invention relates to an apparatus for decrypting contents 
information. 

1 5 Description of the Related Art 

Japanese published unexamined patent application 10- 
269289 discloses a system for managing the distribution of digital 
contents. In the system of Japanese application 10-269289, a 
distributor side encrypts and compresses digital contents into 

2 0 processing-resultant digital contents. The distributor side 

transmits the processing-resultant digital contents, an encryption- 
resultant contents key, and encryption-resultant accounting 
information to a communication opposite party. The distributor 
side implements a process of receiving a charge on the basis of 
2 5 contents use information transmitted from the communication 

opposite party. Then, the distributor side implements a process of 
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dividing the received charge among interested persons Including a 
copjnright holder of the digital contents. On the other hand, a user 
side (a digital contents player) decrypts and expands the 
processing-resultant digital contents in response to the contents 
5 key, thereby reproducing the original digital contents. The user 
side subjects the accounting information to a reducing process 
responsive to the use of the digital contents. The user side 
transmits the reduced accounting information and the contents use 
information to the distributor side. 
1 0 Japanese published unexamined patent application 10- 

283268 discloses a system in which a recording medium stores 
encryption-resultant main Information, and also encryption- 
resultant information representing a key for decrypting the 
encryption-resultant main information. Non-encrypted information 

1 5 representing conditions of decrypting the encryption-resultant 

main information is added to the enciyption-resultant key 
information. In more detail, the encryption-resultant key 
information has non-encrypted control information which contains 
device information and region information. The control information 

2 0 is designed to prevent the encryption-resultant main information 

from being copied onto a magnetic recording medium or an optical 
disc in a user side for illegal use thereof. 

Generally, typical ciyptosystems (encryption-decryption 
systems) are of a symmetric type and an asymmetric type. In the 
2 5 symmetric cryptosystem, a common key is used by both an 

encryption side and a decryption side. On the other hand, the 
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asymmetric cryptosystem uses a public key and a secret key. The 
symmetric cryptosystem Is better than the asymmetric 
cryptosystem in data processing rate. 

In a known hybrid cryptosystem, an encryption side encrypts 
5 contents information in response to a contents key according to a 
symmetric cryptography, and transmits the encryption-resultant 
contents information to a decryption side. In addition, the 
encryption side encrjrpts the contents key according to an 
asymmetric cryptography, and transmits the encryption-resultant 
1 0 contents key to the decryption side. 

It is known to set a common master key in both an encryption 
side and a decryption side. In this case, an encryption side 
encrypts a contents key in response to the master key according to 
a S3mimetric cryptography, and transmits the encryption-resultant 

1 5 contents key to the decryption side. 

In a prior-art s3Tiimetric cryptosystem using a contents key 
and a master key, both an encryption side and a decryption side 
know cryptographic algorithms providing a cryptographic relation 
among a master key, a contents key, and contents information. 

2 0 Accordingly, it is possible to make an imitation of the decryption 

side, that is, an illegal machine of the decryption side, only from 
knowledge of the encryption side. 

SUMMARY OF THE INVENTION 
It is a first object of this invention to provide an improved 
2 5 method of transmitting contents information. 

It is a second object of this invention to provide an improved 
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method of recording contents information. 

It is a third object of this invention to provide an improved 
apparatus for transmitting contents Information. 

It is a fourth object of this invention to provide an improved 
5 apparatus for recording contents information. 

It is a fifth object of this invention to provide an improved 
transmission medium. 

It is a sixth object of this invention to provide an improved 
recording medium. 
10 It is a seventh object of this invention to provide an improved 

method of decrypting contents information. 

It is an eighth object of this invention to provide an improved 
apparatus for decrypting contents information. 

A first aspect of this invention provides a method of 

1 5 transmitting contents information. The method comprises the 

steps of generating a first-key signal representative of a first key 
from first-key base information being a base of the first key; 
encrypting contents information into encryption-resultant contents 
information in response to the first-key signal; generating a second- 

2 0 key signal representative of a second key on the basis of initial-value 

information of a given initial value according to a predetermined key 
generation algorithm; encrypting the first-key base information into 
encryption-resultant first-key base information in response to the 
second-key signal; and transmitting the encryption-resultant 
2 5 contents information, the encryption-resultant first-key base 
information, the initial-value information, and algorithm 
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identification information for identifying the predetermined key 
generation algorithm. 

A second aspect of this invention provides a method of 
recording contents information. The method comprises the steps 
5 of generating a first-key signal representative of a first key from 
first-key base information being a base of the first key; encrypting 
contents information into encryption-resultant contents information 
in response to the first-key signal; generating a second-key signal 
representative of a second key on the basis of initial-value 
1 0 information of a given initial value according to a predetermined key 
generation algorithm; encrypting the first-key base information into 
encryption-resultant first-key base information in response to the 
second-key signal; and recording the encryption-resultant contents 
information, the encryption-resultant first-key base information, the 

1 5 initial-value information, and algorithm identification information 

for identifying the predetermined key generation algorithm. 

A third aspect of this invention provides an apparatus for 
transmitting contents information. The apparatus comprises means 
for generating a first-key signal representative of a first key from 

2 0 first-key base information being a base of the first key; means for 

encrypting contents information into encryption-resultant contents 
information in response to the first-key signal; means for generating 
a second-key signal representative of a second key on the basis of 
initial-value information of a given initial value according to a 
2 5 predetermined key generation algorithm; means for encrypting the 
first-key base information into encryption-resultant first-key base 
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information in response to the second-key signal; and means for 
transmitting the encryption- resultant contents information, the 
encryption-resultant first-key base information, the initial-value 
information, and algorithm identification information for identifying 
5 the predetermined key generation algorithm. 

A fourth aspect of this invention provides an apparatus for 
recording contents information. The apparatus comprises means 
for generating a first-key signal representative of a first key from 
first-key base information being a base of the first key; means for 
1 0 encrypting contents information into encryption-resultant contents 
information in response to the first-key signal; means for generating 
a second-key signal representative of a second key on the basis of 
initial-value information of a given initial value according to a 
predetermined key generation algorithm; means for encrypting the 

1 5 first-key base information into encryption-resultant first-key base 

information in response to the second-key signal; and means for 
recording the encryption-resultant contents information, the 
enciyption-resultant first- key base information, the initial-value 
information, and algorithm identification information for identifying 

2 0 the predetermined key generation algorithm. 

A fifth aspect of this invention provides a transmission 
medium for transmitting enciyption-resultant contents information, 
encryption-resultant first-key base information, initial-value 
information, and algorithm identification information, wherein the 
2 5 encryption-resultant contents information and the enciyption- 
resultant first-key base information are generated by the steps of 
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generating a first-key signal representative of a first key from first- 
key base information being a base of the first key; encrypting 
contents information into encryption-resultant contents information 
In response to the first-key signal; generating a second-key signal 
5 representative of a second key on the basis of initial-value 

information of a given initial value according to a predetermined key 
generation algorithm; and encrypting the first-key base information 
into encryption-resultant first-key base information in response to 
the second-key signal; and wherein the algorithm identification 
1 0 information is for identifying the predetermined key generation 
algorithm. 

A sixth aspect of this invention provides a recording medium 
loaded with encryption-resultant contents information, encryption- 
resultant first-key base information, initial-value information, and 

1 5 algorithm identification information, wherein the encryption- 

resultant contents information and the encryption-resultant first- 
key base information are generated by the steps of generating a 
first-key signal representative of a first key from first-key base 
information being a base of the first key; encrypting contents 

2 0 information into encryption-resultant contents information in 

response to the first-key signal; generating a second-key signal 
representative of a second key on the basis of initial-value 
information of a given initial value according to a predetermined key 
generation algorithm; and encrypting the first-key base information 
2 5 into encryption-resultant first-key base information in response to 
the second-key signal; and wherein the algorithm identification 



-8- 



information is for Identifying the predetermined key generation 
algorithm. 

A seventh aspect of this invention is based on the third aspect 
thereof, and provides an apparatus wherein the means for 
5 generating the second-key signal comprises a linear feedback shift 
register using a specified irreducible primitive polynomial. 

An eighth aspect of this invention provides a method of 
transmitting contents information. The method comprises the 
steps of generating a first-key signal representative of a first key 
1 0 from first-key base information being a base of the first key; 

encrypting contents Information into encryption-resultant contents 
information in response to the first-key signal; generating a second- 
key signal representative of a second key on the basis of initial- value 
information of a given initial value according to a predetermined key 

1 5 generation algorithm; encrypting a part of the first-key base 

information in response to the second-key signal to convert the 
first-key base information into encryption-resultant first-key base 
information; and transmitting the encryption-resultant contents 
information, the encryption-resultant first-key base information, the 

2 0 initial-value information, and algorithm identification information 

for identifying the predetermined key generation algorithm. 

A ninth aspect of this invention provides a method of 
recording contents information. The method comprises the steps 
of generating a first-key signal representative of a first key from 
2 5 first-key base information being a base of the first key; encrypting 

contents information into encryption-resultant contents information 
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in response to the first-key signal; generating a second-key signal 
representative of a second key on the basis of initial-value 
information of a given initial value according to a predetermined key 
generation algorithm; encrypting a part of the first- key base 
5 information in response to the second-key signal to convert the 
first-key base information into encryption-resultant first-key base 
information; and recording the encryption-resultant contents 
information, the enciyption-resultant first-key base information, the 
initial-value information, and algorithm identification information 
1 0 for identifying the predetermined key generation algorithm. 

A tenth aspect of this invention provides an apparatus for 
transmitting contents information. The apparatus comprises means 
for generating a first-key signal representative of a first key from 
first-key base information being a base of the first key; means for 

1 5 encrypting contents information into encryption-resultant contents 

information in response to the first-key signal; means for generating 
a second-key signal representative of a second key on the basis of 
initial-value information of a given initial value according to a 
predetermined key generation algorithm; means for encrypting a 

2 0 part of the first-key base information in response to the second-key 

signal to convert the first-key base information into encryption- 
resultant first-key base information; and means for transmitting the 
encryption-resultant contents information, the encryption-resultant 
first-key base information, the initial-value information, and 
2 5 algorithm identification information for identifying the 
predetermined key generation algorithm. 
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An eleventh aspect of this invention provides an apparatus for 
recording contents information. The apparatus comprises means 
for generating a first-key signal representative of a first key from 
first-key base information being a base of the first key; means for 
5 encrypting contents information into encryption-resultant contents 
information in response to the first-key signal; means for generating 
a second-key signal representative of a second key on the basis of 
initial-value information of a given initial value according to a 
predetermined key generation algorithm; means for encrypting a 
1 0 part of the first-key base information in response to the second-key 
signal to convert the first-key base information into encryption- 
resultant first-key base information; and means for recording the 
encryption-resultant contents information, the encryption-resultant 
first-key base information, the initial-value information, and 

1 5 algorithm identification information for identifying the 

predetermined key generation algorithm. 

A twelfth aspect of this invention provides a transmission 
medium for transmitting enciyption-resultant contents information, 
encryption-resultant first-key base information, initial-value 

2 0 information, and algorithm identification information, wherein the 

enciyption-resultant contents information and the encryption- 
resultant first-key base information are generated by the steps of 
generating a first-key signal representative of a first key from first- 
key base information being a base of the first key; encrypting 
2 5 contents information into enciyption-resultant contents information 
in response to the first-key signal; generating a second-key signal 
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representative of a second key on the basis of initial-value 
information of a given initial value according to a predetermined key 
generation algorithm; and encrypting a part of the first-key base 
information in response to the second-key signal to convert the 
5 first-key base information into encryption-resultant first-key base 
information; and wherein the algorithm identification information is 
for identifying the predetermined key generation algorithm. 

A thirteenth aspect of this invention provides a recording 
medium loaded with enciyption-resultant contents information, 
1 0 encryption-resultant first-key base information, initial-value 

information, and algorithm identification information, wherein the 
encryption-resultant contents information and the encryption- 
resultant first-key base information are generated by the steps of 
generating a first-key signal representative of a first key from first- 

1 5 key base information being a base of the first key; encrypting 

contents information into enciyption-resultant contents information 
in response to the first-key signal; generating a second-key signal 
representative of a second key on the basis of initial-value 
information of a given initial value according to a predetermined key 

2 0 generation algorithm; and encrypting a part of the first-key base 

information in response to the second-key signal to convert the 
first-key base information into enciyption-resultant first-key base 
information; and wherein the algorithm identification information is 
for identifying the predetermined key generation algorithm. 
2 5 A fourteenth aspect of this invention is based on the tenth 

aspect thereof, and provides an apparatus wherein the means for 
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generating the second-key signal comprises a linear feedback shift 
register using a specified irreducible primitive polynomial. 

A fifteenth aspect of this Invention provides a method of 
decrypting encryption-resultant contents information generated by 
5 an encrypting side which implements the steps of generating a 
first-key signal representative of a first key from first-key base 
information being a base of the first key; encrypting contents 
information into encryption-resultant contents information in 
response to the first-key signal; generating a second-key signal 
1 0 representative of a second key on the basis of initial-value 

information of a given initial value according to a predetermined key 
generation algorithm; and enciypting the first-key base information 
into encryption-resultant first-key base information in response to 
the second-key signal. The method comprises the steps of 

1 5 identifying the predetermined key generation algorithm in response 

to algorithm identification information for identifying the 
predetermined key generation algorithm; generating a second-key 
signal representative of a second key on the basis of the initial-value 
information and the identified key generation algorithm; decrjrpting 

2 0 encryption-resultant first-key base information into original first- key 

base information in response to the second-key signal; generating a 
first-key signal representative of a first key from the original first- 
key base information; and decrypting encrjrption-resultant contents 
information into original contents information in response to the 
2 5 first-key signal. 

A sixteenth aspect of this invention provides an apparatus for 
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deciypting enciyptlon-resultant contents information generated by 
an enciypting side which implements the steps of generating a 
first-key signal representative of a first key from first-key base 
information being a base of the first key; encrypting contents 
5 information into encryption-resultant contents information in 
response to the first-key signal; generating a second-key signal 
representative of a second key on the basis of initial-value 
information of a given initial value according to a predetermined key 
generation algorithm; and encrypting the first-key base information 
1 0 into encryption-resultant first-key base information in response to 
the second-key signal. The apparatus comprises means for 
identifying the predetermined key generation algorithm in response 
to algorithm identification information for identifying the 
predetermined key generation algorithm; means for generating a 

1 5 second-key signal representative of a second key on the basis of the 

initial-value information and the identified key generation 
algorithm; means for decrypting encryption-resultant first-key base 
information into original first-key base information in response to 
the second-key signal; means for generating a first-key signal 

2 0 representative of a first key from the original first-key base 

information; and means for decrypting encryption-resultant 
contents information into original contents information in response 
to the first-key signal. 

A seventeenth aspect of this invention is based on the 
2 5 sixteenth aspect thereof, and provides an apparatus wherein the 

identifying means comprises means for selecting one from among a 
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plurallty of key generation algorithms in response to the algorithm 
Identification information as the identified key generation 
algorithm. 

An eighteenth aspect of this invention is based on the 
5 seventeenth aspect thereof, and provides an apparatus wherein the 
means for generating the second-key signal comprises a linear 
feedback shift register having a feedback object position which is 
set in accordance with a primitive polynomial in the identified key 
generation algorithm. 
1 0 A nineteenth aspect of this invention provides a method of 

decrypting enciyption-resultant contents information generated by 
an encrypting side which implements the steps of generating a 
first-key signal representative of a first key from first-key base 
information being a base of the first key; encrypting contents 

1 5 information into encryption-resultant contents Information in 

response to the first-key signal; generating a second-key signal 
representative of a second key on the basis of initial-value 
information of a given initial value according to a predetermined key 
generation algorithm; and encrypting a part of the first-key base 

2 0 information in response to the second-key signal to convert the 

first-key base information into encryption-resultant first-key base 
information. The method comprises the steps of identifying the 
predetermined key generation algorithm in response to algorithm 
identification information for identifying the predetermined key 
2 5 generation algorithm; generating a second-key signal representative 
of a second key on the basis of the initial-value information and the 
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identified key generation algorithm; decrypting encryption- 
resultant first-key base information into original first-key base 
information in response to the second-key signal; generating a first- 
key signal representative of a first key from the original first-key 
5 base information; and decr3rpting encryption-resultant contents 
information into original contents information in response to the 
first-key signal. 

A twentieth aspect of this invention provides an apparatus for 
decrypting encryption-resultant contents information generated by 
10 an encrypting side which implements the steps of generating a 
first-key signal representative of a first key from first-key base 
information being a base of the first key; encrypting contents 
information into encryption-resultant contents information in 
response to the first-key signal; generating a second-key signal 

1 5 representative of a second key on the basis of initial-value 

information of a given initial value according to a predetermined key 
generation algorithm; and encrypting a part of the first-key base 
information in response to the second-key signal to convert the 
first-key base information into encryption-resultant first-key base 

2 0 information. The apparatus comprises means for identifying the 

predetermined key generation algorithm in response to algorithm 
identification information for identifying the predetermined key 
generation algorithm; means for generating a second-key signal 
representative of a second key on the basis of the initial-value 
2 5 information and the identified key generation algorithm; means for 
decrypting encryption-resultant first-key base information into 
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original first-key base information in response to the second-key 
signal; means for generating a first-key signal representative of a 
first key from the original first-key base information; and means for 
decrypting encryption-resultant contents information into original 
5 contents information in response to the first-key signal. 

A twenty-first aspect of this invention is based on the 
twentieth aspect thereof, and provides an apparatus wherein the 
identifying means comprises means for selecting one from among a 
plurality of key generation algorithms in response to the algorithm 
1 0 identification information as the identified key generation 
algorithm. 

A twenty-second aspect of this invention is based on the 
twenty-first aspect thereof, and provides an apparatus wherein the 
means for generating the second-key signal comprises a linear 

1 5 feedback shift register having a feedback object position which is 

set in accordance with a primitive polynomial in the identified key 
generation algorithm. 

BRIEF DESCRIPTION OF THE DRAWINGS 
Fig, 1 Is a block diagram of a system for contents Information 

2 0 according to an embodiment of this Invention. 

Fig. 2 is a block diagram of a key generator in a primary side of 
the system in Fig. 1. 

Fig. 3 is a diagram of a reference table represented by data 
stored in a memory in a secondary side of the system in Fig. 1. 
2 5 DESCRIPTION OF THE PREFERRED EMBODIMENT 



Fig. I shows a system for contents information according to an 
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embodiment of this invention. The system of Fig. 1 includes a 
primaiy section P, a secondary section Q, and an intermediate 
section R. The primary section P and the secondary section Q are 
connected to each other via the intermediate section R. 
5 The primary section P includes an information recording 

apparatus or an information transmitting apparatus. The secondary 
section Q includes an information reproducing apparatus or an 
information receiving apparatus. An example of the information 
reproducing apparatus is an information player. The intermediate 
1 0 section R includes a recording medium or a transmission medium. 
Examples of the recording medium are a magnetic recording 
medium, an optical recording medium, and a semiconductor 
memory. Examples of the transmission medium are an optical fiber 
cable, electric wires, and a radio transmission line. The 

1 5 transmission medium is also referred to as a transmission line. 

The primary section P includes a key generator 1 and 
encryptors 2 and 3. The encryptor 3 receives information being a 
base of a first key (a contents key). The first- key base information is 
fed from a suitable device (not shown). In addition, the encryptor 3 

2 0 receives contents information from a suitable device (not shown). 

The encryptor 3 has a calculating block and an encrypting block. 
The calculating block in the encryptor 3 generates a signal (data) 
representative of the first key from the first-key base information. 
The encrypting block in the encryptor 3 encrypts the contents 
2 5 information into encryption-resultant contents information in 
response to the first-key signal. The encryptor 3 outputs the 
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enciyption-resultant contents information to the intermediate 
section R. The encryption by the enciyptor 3 may be based on a 
known encryption algorithm such as DES. 

Specifically, the primary section P records the encryption- 
5 resultant contents information on the recording medium of the 
intermediate section R, or transmits the encryption-resultant 
contents information to the transmission line of the intermediate 
section R. 

The key generator 1 receives information representative of an 
1 0 initial value from a suitable device (not shown). The key generator 1 
produces a signal representative of a second key from the initial- 
value information according to a key generation algorithm. The key 
generator 1 outputs the second-key signal to the enciyptor 2. 

The enciyptor 2 receives the first-key base information. The 

1 5 encryptor 2 encrypts the first-key base information into encryption- 

resultant first-key base information in response to the second-key 
signal. The encryptor 2 outputs the encryption-resultant first-key 
base information to the intermediate section R. The encryption by 
the enciyptor 2 may be based on a known encryption algorithm 

2 0 such as DES. 

Specifically, the primary section P records the encryption- 
resultant first-key base information on the recording medium of the 
intermediate section R, or transmits the encryption-resultant first- 
key base information to the transmission line of the intermediate 
2 5 section R. 

The enciyptor 2 may encrypt a part of the first-key base 
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inforaiation in response to the second-key signal. For example, the 
encryptor 2 encrypts only an important portion of the first-key base 
information. Alternatively, the encryptor 2 may encrypt the whole 
of the first-key base information. 
5 The primary section P outputs the initial-value information to 

the intermediate section R. Specifically, the primary section P 
records the initial-value information on the recording medium of 
the intermediate section R, or transmits the initial-value 
information to the transmission line of the intermediate section R. 
1 0 Information representative of an identification (ID) number of 

the key generation algorithm used by the key generator 1 is available 
in the primary section P. For example, the algorithm-number 
information is fed from a suitable device (not shown). The primary 
section P outputs the algorithm-number information to the 

1 5 intermediate section R. Specifically, the primary section P records 

the algorithm-number information on the recording medium of the 
intermediate section R, or transmits the algorithm-number 
information to the transmission line of the intermediate section R. 
Preferably, the primary section P has a multiplexer which 

2 0 combines the algorithm-number information, the initial-value 

information, the encryption-resultant first-key base information, and 
the encryption-resultant contents information into multiplexing- 
resultant information of a predetermined format. In this case, the 
primary section P outputs the multiplexing-resultant information to 
2 5 the intermediate section R. Specifically, the primary section P 
records the multiplexing-resultant information on the recording 
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medium of the intermediate section R, or transmits the 
multiplexing-resultant information to the transmission line of the 
intermediate section R. 

The primary section P may include signal converters which 
5 change the algorithm-number information and the initial-value 

information according to predetermined functions. In this case, the 
primary section P outputs the change-resultant algorithm-number 
information and the change-resultant initial-value information to the 
intermediate section R. Specifically, the primary section P records 
1 0 the change-resultant algorithm-number information and the change- 
resultant initial-value information on the recording medium of the 
intermediate section R, or transmits the change-resultant 
algorithm-number information and the change-resultant initial-value 
information to the transmission line of the intermediate section R. 

1 5 The second key produced by the key generator 1 acts as a 

higher-rank key with respect to the first key (the contents key). 
Preferably, the second key is designed to change randomly and 
greatly in response to the initial value. 

The key generator 1 includes a circuit having N bits, where N 

2 0 denotes a predetermined natural number. Fig. 2 shows an example 

of the key generator 1. In the key generator 1 of Fig. 2, an included 
circuit has 8 bits, and thus N = 8. 

The key generator 1 in Fig. 2 includes 1-bit shift registers rl- 
r8, AND gates gl-g8, Exclusive-OR gates al-a7, a signal converter 
2 5 lA, and multi-bit (8-bit) buses IB and IC. The shift registers rl-r8, 
the AND gates gl-g8, and the Exclusive-OR gates al-a7 are 
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combined to form a linear feedback shift register (LFSR) having 8 
bits (N = 8). 

The shift registers rl-rS are connected in a linear array or a 
series array. Setting terminals of the shift registers rl-r8 are 
5 connected to bit lines of the bus IB, respectively. First input 

terminals of the AND gates gl-g8 are connected to bit lines of the 
bus IC, respectively. Second input terminals of the AND gates gl- 
gS are connected to the output terminals of the shift registers rl- 
r8, respectively. The output terminals of the AND gates gl-g7 are 
1 0 connected to first input terminals of the Exclusive-OR gate al-a7, 
respectively. The output terminal of the AND gate g8 is connected 
to a second input terminal of the Exclusive-OR gate a7. The output 
terminal of the Exclusive-OR gate a7 is connected to a second input 
terminal of the Exclusive-OR gate a6. The output terminal of the 

1 5 Exclusive-OR gate a6 Is connected to a second input terminal of the 

Exclusive-OR gate a5. The output terminal of the Exclusive-OR gate 
a5 is connected to a second input terminal of the Exclusive-OR gate 
a4. The output terminal of the Exclusive-OR gate a4 is connected to 
a second input terminal of the Exclusive-OR gate a3. The output 

2 0 terminal of the Exclusive-OR gate a3 is connected to a second input 

terminal of the Exclusive-OR gate a2. The output terminal of the 
Exclusive-OR gate a2 is connected to a second input terminal of the 
Exclusive-OR gate al. The output terminal of the Exclusive-OR gate 
al is connected to the input terminal of the shift register rl. The 
2 5 input terminal of the signal converter lA is connected to the output 
terminal of the shift register rS. The output terminal of the signal 
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generator lA leads to the enciyptor 2 (see Fig. 1). 

Bits of the information representative of the initial value are 
fed via the bus IB to the shift registers r2-r8, respectively. The bits 
of the initial-value information are set in the shift registers r2-r8, 
5 respectively. At least one of the bits of the initial- value information 
differs from "0". Bits of information representative of a coefficient 
are fed via the bus IC to the first input terminals of the AND gates 
gl-g8, respectively. Each of the AND gates gl-gS assumes a closed 
state or an open state (a conductive state or a non- conductive state) 
10 in accordance with the logic state of a related bit of the coefficient 
information. Thereafter, a clock signal is fed from a suitable device 
(not shown) to the shift registers rl-rS so that 1-bit signals are 
moved in the shift-register array toward the signal converter lA. 
Open ones (conductive ones) of the AND gates gl-gS conduct the 

1 5 output signals from related shift registers to related Exclusive- OR 

gates. The positions of open ones of the AND gates gl-gS 
correspond to positions in the shift- register array from which 1-bit 
signals are fed back. The positions of open ones of the AND gates 
gl-gS are determined by the coefficient information. On the other 

2 0 hand, closed ones (non-conductive ones) of the AND gates gl-g8 

output "0" signals to related Exclusive-OR gates, and do not conduct 
the output signals from related shift registers to the related 
Exclusive-OR gates. The Exclusive-OR gates al-a7 execute 
Exclusive-OR operation with respect to the output signals from the 
2 5 AND gates gl-g8. A final result of the Exclusive-OR operation is fed 
back from the lowest-place Exclusive-OR gate al to the input 
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terminal of the lowest-place shift register rl. The output signal 
from the highest-place shift register r8 is an maximum length code 
signal. 

The signal converter lA receives the maximum length code 
5 signal from the highest-place shift register r8. The signal converter 
lA changes the maximum length code signal into the second-key 
signal according to a predetermined nonlinear function based on, 
for example, a nonllnearity of a multiplier. The signal converter lA 
outputs the second-key signal to the encryptor 2 (see Fig. 1). 

1 0 Preferably, the coefficient, the information of which is fed to 

the AND gates gl-g8, corresponds to a specified N-order irreducible 
primitive polynomial. The following 8-order primitive polynomial is 
taken as an example. 

+ x7 + + X + 1 •••(1) 
15 In the case of the poljmomial (1), the coefficient information has 

bits being "1", "1", "0", "0", "0", "0", "1", and "1" respectively. In this 
case, "1", "1", "0", "0", "0", "0", "1", and "1" are fed to the AND gates 
g8, g7, g6, g5, g4, g3, g2, and gl, respectively. 

A specified primitive polynomial corresponding to the 

2 0 coefficient information defines a key generation algorithm used in 

the key generator 1. Accordingly, the identification number (the ID 
number) of the key generation algorithm' is uniquely determined for 
the specified primitive polynomial. 

The algorithm-number information, the initial-value 
2 5 information, the encryption-resultant first-key base information, and 
the encryption-resultant contents information are transmitted from 
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the primary section P to the secondary section Q through the 
intermediate section R. 

The secondary section Q includes a memory 4, a key 
generator 5, and decrypting devices 6 and 7. The memory 4 uses, 
5 for example, a ROM. The memory 4 stores data representing a 
reference table of algorithm identification (ID) numbers, 
coefficients, and primitive polynomials. The reference table is 
designed to identify a key generation algorithm (a coefficient) from 
algorithm-number information. In the reference table, the 

1 0 coefficients are located at different addresses determined by the 

algorithm ID numbers, respectively. Similarly, the primitive 
polynomials are located at different addresses determined by the 
algorithm ID numbers, respectively. 

Fig. 3 shows an example of the reference table in the memory 
15 4. In the reference table of Fig. 3, the algorithm ID number "0" is 
assigned to a coefficient having bits equal to "1", "1", "0", "0", "0", 
"0", "1", and "1". Thus, the algorithm ID number "0" is assigned to 
the polynomial "x^ + x^ + x^ + x + 1". The algorithm ID number "1" 
is assigned to a coefficient having bits equal to "1", "0", "0", "0", "1", 

2 0 "1", "1", and "0". Thus, the algorithm ID number "1" is assigned to 

the polynomial "x^ + x^ + x^ + x^ + 1". The algorithm ID number 
"2" is assigned to a coefficient having bits equal to "1", "0", "1", "1", 
"0", "1", "0", and "0". Thus, the algorithm ID number "2" is assigned 
to the polynomial "x^ + x^ + x^ + x^ + 1". The algorithm ID 
2 5 number "3" is assigned to a coefficient having bits equal to "1", "1", 
"1", "1", "0", "0", "1", and "1". Thus, the algorithm ID number "3" is 
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assigned to the polynomial "x^ + x'^ + + + + x + 1". The 
algorithm ID number "4" is assigned to a coefficient having bits 
equal to "1", "0", "0", "1", "0", "1", "0", and "1". Thus, the algorithm 
ID number "4" is assigned to the polynomial "x^ + x^ + x^ + x + 1". 
5 The algorithm ID number "5" is assigned to a coefficient having bits 
equal to "1", "0", "1", "1", "0", "0", "1", and "0". Thus, the algorithm 
ID number "5" is assigned to the polynomial "x^ + x^ + x^ + x2 + 1". 
The algorithm ID number "6" is assigned to a coefficient having bits 
equal to "1", "0", "1", "1", "0", "0", "0", and "1". Thus, the algorithm 
10 ID number "6" is assigned to the poljnaomial "x^ + x^ + x^ + x + 1". 
The algorithm ID number "7" is assigned to a coefficient having bits 
equal to "1", "0", "1", "0", "1", "1", "1", and "1". Thus, the algorithm 
ID number "7" is assigned to the polynomial "x^ + 
+ X + 1". 

1 5 The memory 4 receives the algorithm-number information 

from the intermediate section R. The received algorithm-number 
information is used as an address signal, and the reference table in 
the memory 4 is accessed in response to the address signal. As a 
result, a coefficient and a primitive polynomial corresponding to the 

2 0 received algorithm-number information are identified. In other 

words, a key generation algorithm corresponding to the received 
algorithm-number information is identified. The memory 4 outputs 
information of the identified coefficient to the key generator 5. 

The key generator 5 is similar in design and operation to the 
2 5 key generator 1 of the primary section P. The key generator 5 

receives the initial-value information from the intermediate section 
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R. The key generator 5 reproduces the second-key signal from the 
initial-value information and the coefficient information. The key 
generator 5 outputs the reproduced second-key signal to the 
decrypting device 6. 
5 The decrypting device 6 receives the encryption -resultant 

first-key base information from the intermediate section R. 
Operation of the decrypting device 6 is inverse with respect to that 
of the encryptor 2 in the primary section P. The decrypting device 
6 decrypts the encryption-resultant first-key base information into 
1 0 the first-key base information in response to the second-key signal. 
The decrypting device 6 outputs the first-key base information to 
the decrypting device 7. 

The decrypting device 7 receives the encryption-resultant 
contents information from the intermediate section R. Operation of 

1 5 the decrypting device 7 is inverse with respect to that of the 

encryptor 3 in the primary section P. The decrypting device 7 has a 
calculating block and a decrypting block. The calculating block in 
the deciypting device 7 generates a signal (data) representative of 
the first key from the first-key base information. The decrypting 

2 0 block in the decrypting device 7 decrypts the encryption-resultant 

contents information into the original contents information in 
response to the first-key signal. Thus, the decrypting device 7 
reproduces the original contents information. The decrypting 
device 7 outputs the reproduced contents information. 
2 5 In the case where the primary section P includes the 

multiplexer, the secondary section Q has a demultiplexer which 
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receives the multiplexing-resultant information from the 
intermediate section R. The demultiplexer separates the 
multiplexing-resultant information signal into the algorithm-number 
information, the initial-value information, the encryption-resultant 
5 first-key base information, and the encryption-resultant contents 
information. The demultiplexer feeds the algorithm-number 
information, the initial-value information, the encryption-resultant 
first-key base information, and the encryption-resultant contents 
information to the memory 4, the key generator 5, the decrypting 
1 0 device 6, and the decrypting device 7, respectively. 

In the case where the primary section P includes the signal 
converters, the secondary section Q has inverse signal converters 
which receive the change -resultant algorithm-number information 
and the change-resultant initial-value information. The inverse 

1 5 signal converters return the change-resultant algorithm- number 

information and the change-resultant Initial-value information to the 
original algorithm-number information and the original initial-value 
information, respectively. The inverse signal converters feed the 
the original algorithm-number information and the original initial- 

2 0 value information to the memory 4 and the key generator 5, 

respectively. 

Preferably, the secondary side Q is formed by an LSI (large- 
scale integration) circuit having a single body. In this case, it is 
difficult to illegally access the memory 4 from an external. 
2 5 In the system of Fig. 1 , since the reference table is provided 

only in the memory 4 of the secondary section Q, it is difficult to 
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make an imitation of the secondary side Q (that is, an illegal 
machine of the secondaiy side Q) only from knowledge of the 
primary section P. In the event that an illegal machine of the 
secondary side Q is found, the key generation algorithm used by the 
5 primary side P and the algorithm-number information transmitted 
from the primary side P to the secondary side Q are changed to 
make the illegal machine inoperative. 

The embodiment of this invention may be modified as follows. 
Specifically, a modification of the embodiment of this invention 

1 0 provides M information pieces composing information being a base 
of a first key (a contents key), where M denotes a predetermined 
natural number. In this case, encryption of the first-key base 
information is executed through M stages. The encryption-resultant 
M information pieces are recorded or transmitted as the 

1 5 encryption-resultant first-key base information. 



